This repository has been archived by the owner on Nov 16, 2018. It is now read-only.

Protect the /admin/api/advanced route #58

Open

CashWilliams opened this issue Jul 15, 2017 · 2 comments

CashWilliams commented Jul 15, 2017

Currently the reservoir_ui.api.advanced route is open to the public due to https://github.com/acquia/reservoir/blob/8.x-1.x/modules/reservoir_ui/reservoir_ui.routing.yml#L41

The text was updated successfully, but these errors were encountered:

Author

CashWilliams commented Jul 15, 2017 •

edited

Note: This is a security issue, but since there is not a stable release, the module/profile is not covered by the Drupal Security Team.

tedbow commented Aug 11, 2017

@CashWilliams thanks created a PR

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.